Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
File:                     3230312e37312e372e302f32342d3234203d3e20323730323832.roa (raw, json)
Hash identifier:          SX5RU2LPuWHAIi92bTf0pJAKq912WRjWvuPUr+KGjjE=
Subject key identifier:   29:B1:31:14:62:8F:3D:83:1C:EF:BA:D6:44:A7:DE:8A:FF:86:4D:EC
Certificate issuer:       /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Certificate serial:       4DA2E24775DD23EF80B87426C915CFDC9BDFA481
Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
Signing time:             Fri 06 Feb 2026 01:47:46 +0000
ROA not before:           Fri 06 Feb 2026 01:42:46 +0000
ROA not after:            Fri 05 Feb 2027 01:47:46 +0000
asID:                     270282
IP address blocks:        201.71.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl
                          rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a2:e2:47:75:dd:23:ef:80:b8:74:26:c9:15:cf:dc:9b:df:a4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
        Validity
            Not Before: Feb  6 01:42:46 2026 GMT
            Not After : Feb  5 01:47:46 2027 GMT
        Subject: CN=29B13114628F3D831CEFBAD644A7DE8AFF864DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:2e:fe:41:71:2a:c5:e7:91:b9:9c:b8:89:
                    f4:43:60:ca:1d:d5:5f:53:d6:93:ce:58:5e:68:62:
                    e5:ba:c1:c5:3c:a8:9e:a4:a7:94:55:73:a4:8d:f9:
                    87:fa:26:8a:a8:30:0d:24:df:da:57:a9:b6:d3:47:
                    c0:dd:47:86:ae:e4:e6:21:24:05:e6:ba:9f:46:34:
                    57:f6:9e:40:8c:b2:d7:40:b8:8c:92:f1:3a:b7:a8:
                    2d:6e:ed:dc:55:17:ed:a3:12:d2:42:50:04:c5:db:
                    d4:45:83:26:f3:9a:84:bd:38:c4:17:8c:0e:ab:a2:
                    a0:73:ff:ba:4e:4c:a8:07:44:93:88:ce:d8:3b:b9:
                    a8:cc:1d:11:9a:90:97:b1:c9:2a:73:60:70:62:6e:
                    78:9e:77:18:cc:2b:93:1f:81:15:41:30:dc:85:ae:
                    e7:ae:4f:da:75:cd:cd:9f:6b:e7:f1:66:24:a8:2c:
                    ab:01:37:81:4c:03:b2:09:28:98:54:5b:77:6f:74:
                    c5:85:86:5c:06:26:d9:36:9a:e6:83:e8:76:da:58:
                    a2:17:78:37:fa:ce:a9:ca:80:2c:98:39:52:0f:67:
                    84:8a:fe:0b:f8:60:44:04:67:2d:5f:92:b8:05:9b:
                    f7:fa:f7:97:b3:b7:42:00:38:54:ee:9b:38:59:52:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B1:31:14:62:8F:3D:83:1C:EF:BA:D6:44:A7:DE:8A:FF:86:4D:EC
            X509v3 Authority Key Identifier:
                keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e372e302f32342d3234203d3e20323730323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:54:f4:9e:bc:70:67:50:e9:d9:a6:3c:eb:72:42:db:ec:a0:
         26:81:e0:04:3b:b6:42:19:5e:1e:3d:e7:15:09:4b:da:9b:81:
         31:3b:04:2f:9d:47:ee:12:79:32:a7:fc:99:67:99:6d:0d:48:
         2d:45:b0:8e:33:6b:48:04:5e:0c:4c:1e:ce:4d:85:83:cc:58:
         3d:25:66:0e:a5:2e:17:1d:7d:5a:58:3b:49:83:64:cc:e1:87:
         69:5f:77:3e:bb:44:7f:ce:45:34:7f:68:2d:c9:93:b4:ba:cb:
         7a:f4:af:d6:dc:8c:26:74:4e:3c:88:fe:fa:9b:9d:5a:d1:80:
         4f:61:8c:62:d2:3e:ec:fb:af:9b:b4:dd:da:66:1b:fe:b7:3a:
         3c:2c:89:fd:7e:de:c9:80:be:fa:e5:39:59:c9:c0:ac:b2:93:
         30:5f:c7:2d:24:c7:0f:c0:3d:4f:da:7c:92:f2:c0:eb:81:c3:
         2b:6e:bc:0e:ef:51:d3:90:e5:59:03:a6:82:af:e6:40:df:21:
         59:20:72:02:a3:a4:36:d0:35:a0:42:a6:1c:dd:96:37:f6:67:
         fd:52:b6:19:f2:86:5a:d5:7d:ab:8a:b4:a4:d7:4e:c8:67:76:
         c4:5f:46:b9:49:d1:38:d6:c4:78:76:a5:34:9f:db:a9:fd:02:
         b3:d0:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:42:44 2026 by rpki-client